General
- Target SecuriteInfo.com.Trojan.Mardom.ON.24.25444.6656
- Size 353KB
- Sample251016-pgr61aykt8
- SHA256 bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b
- MD5 3121ecc67e64fdf65b2b3c9f5966ed11
- SHA1 e02765d98dbd9e1a2d3106c5cfc849f91dae49f1
- SHA512 0f974774db1196cc4fcecb0b8e54ac70b67f96db30fe219791d650fdbc354d18cf41bc75de089775fcc11cfc3d5c7fcb762e02ac064d1bb58eebc875670cd795
- SSDEEP 3072:w2drpq3JiL1FBpMVOvnz5R6ipM5XnjBZhHmStRlxFVNt+hcC5fjmP0pzYAzpceSI:wdKGCDRUFv2O16o809bAFz2c0g
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Extracted
Family
-
gurcu
C2
-
https://api.telegram.org/bot6138662884:AAFrm9ctla5-VY7cy0kGvZQNHmzzXb6dF2c/sendMessage?chat_id=5222335784
Targets
-
- Target SecuriteInfo.com.Trojan.Mardom.ON.24.25444.6656
- Size 353KB
- SHA256 bc7536cb39c4dc0ef7522b46efbc97b87edd958248267932c46cdda2d571a72b
- MD5 3121ecc67e64fdf65b2b3c9f5966ed11
- SHA1 e02765d98dbd9e1a2d3106c5cfc849f91dae49f1
- SHA512 0f974774db1196cc4fcecb0b8e54ac70b67f96db30fe219791d650fdbc354d18cf41bc75de089775fcc11cfc3d5c7fcb762e02ac064d1bb58eebc875670cd795
- SSDEEP 3072:w2drpq3JiL1FBpMVOvnz5R6ipM5XnjBZhHmStRlxFVNt+hcC5fjmP0pzYAzpceSI:wdKGCDRUFv2O16o809bAFz2c0g
- MD5 SHA1 SHA512 SSDEEP
Gurcu family